North KoreaActive
Lazarus Group
Known for: Sony Pictures hack, WannaCry, cryptocurrency theft
Index
Threat Groups
A quick index of major state-linked actors, ransomware crews, cybercrime groups, and recurring names behind global incidents.
RussiaActive
APT28 (Fancy Bear)
Known for: DNC hack, Olympic Destroyer, election interference
RussiaActive
APT29 (Cozy Bear)
Known for: SolarWinds supply chain attack, COVID-19 research theft
United States (NSA)Attribution disputed
Equation Group
Known for: Stuxnet, Flame, advanced persistent threats
RussiaDisrupted 2024
LockBit
Known for: Ransomware-as-a-service, double extortion
RussiaDissolved 2022
Conti
Known for: Ransomware, healthcare targeting
RussiaDisrupted
REvil (Sodinokibi)
Known for: Kaseya supply chain attack, JBS meat processor hack
MultipleActive
MageCart
Known for: E-commerce card skimming, JavaScript injection